www.pwc.com
Developing an effective
ICAAP
Chris Matten
31 May 2011
Agenda
ICAAP components
Challenges in implementing the ICAAP
Roles of IA and risk management
Ongoing maintenance
PwC
2
Pillar 2, Principle 1 – The ICAAP
“Banks should have a process for assessing their overall capital
adequacy in relation to their risk profile and a strategy for maintaining
their capital levels”
Board and senior management oversight
Sound capital assessment
• Policies and procedures … to measure … all material
risks
• Process to relate capital to level of risk
Comprehensive assessment of all risks
Monitoring and reporting
Internal control review
PwC
3
ICAAP Principles - CEBS
I.
Every institution must have a process for assessing its capital adequacy
relative to its risk profile (an ICAAP)
II. The ICAAP is the responsibility of the institution.
III. The ICAAP’s design should be fully specified, the institution’s capital
policy should be fully documented, and the management body should take
responsibility for the ICAAP
IV. The ICAAP should form an integral part of the management process and
decision-making culture of the institution
V. The ICAAP should be reviewed regularly
VI. The ICAAP should be risk-based
VII. The ICAAP should be comprehensive
VIII. The ICAAP should be forward-looking
IX. The ICAAP should be based on adequate measurement and assessment
processes
X. The ICAAP should produce a reasonable outcome
PwC
4
ICAAP components
1. Description of risk governance
2. Statement of risk appetite
i. Link to risk limits
ii. Link to strategy
3. Comparison with risk-bearing capacity
4. Assessment of material risks
5. Comprehensive risk capital model (economic capital?)
6. Capital forecasts and stress tests, showing:
i. Regulatory capital
ii. Risk or economic capital
iii. Physical capital
iv. Available vs required capital
7. Capital allocation process and policies
8. Use test - embedded in business processes
PwC
5
Statement of risk appetite
1. Board-level document
2. Quantifies the desired level of risk that an institution is willing to
take.
3. Typically be expressed in terms of risk limits, but under an ICAAP
should also quantify those risk limits in terms of capital
4. Usually refreshed at least annually.
5. May be expressed in terms of earnings volatility (earnings
perspective), either in addition to or instead of the solvency
perspective.
6. Where an institution only uses an earnings perspective, meeting
Pillar 2 ICAAP requirements may be challenging
PwC
6
Statement of risk appetite - example
Metric
Indicators
Quantitative indicators
Earnings volatility

No more than 5% chance of being unable to pay our forecast dividend. (i.e. we expect to
pay our dividend in 19 out of 20 years)

Do not deliver below market consensus earnings forecast (as at the beginning of the
financial year) for the Group and each of its Divisions, by more than 20% (the consensus
market forecast for this year is PAT of £700m, but our budget envisages £750 m)
Return on equity

Target return on equity is 12%
Target capital ratios

Our Tier 1 capital ratio should not fall below 6% of RWAs and our total capital ratio
should not fall below 10%

Our economic capital utlisation should not exceed 85% of our available capital

Note: our EC requirement is lower than our Basel I minimum capital requirement; once
Basel II comes into force on 1 Jan 2007, we expect our regulatory capital requirements to
fall closer into line with our EC requirements
Credit rating

AA- (equivalent to Probability of Default of 0.03% for one year – S&P).

AA is our target rating and our intention is to maintain it

Monitor indicators for early warnings of non-sustainability of growth (e.g. overconfidence
Qualitative indicators
Unable to manage
of management, process delays, system constraints)
growth effectively
Business activities

Limit our business activities to: retail and corporate banking; expand our IB activities only
in those areas where we have proven competence; asset management.
Insufficient risk is

Limit overseas expansion to China and the US

Track rationale for rejected (and accepted) business opportunities to ensure that risk
appetite is properly reflected
assumed
Zero tolerance risks
Regulatory risk
PwC

In key regimes (UK and USA), have no instance of “flagrant breaches”, fines or headlines

No breach of delegated authorities
7
Statement of risk-bearing capacity
1. Board-level document
2. Quantifies the ability of the institution to absorb risks
3. Typically expressed in terms of capital (solvency perspective) but
may also be expressed in an earnings perspective.
4. The statement of risk-bearing capacity and statement of risk
appetite are usually companion documents
PwC
8
In organisational terms
The quantum of risk the
firm is willing to accept
within its overall capacity
Risk
Appetite
The maximum risk the firm can
bear, which is linked to capital,
liquid assets, borrowing limits etc
Risk-bearing capacity
Allocated risk limits
Target Risk Profile
Utilisation of limits
Actual Risk Profile
Credit
Risk
PwC
Market
Risk
Op.s
Risk
Int. rate
Risk
Liquidity
Risk
Etc.
Individual risk
measures
9
Assessment of material risks
1. Banks need to assess all material risks
2. Should be fully documented
3. Risks that are deemed not to be material still need to be documented (+
reasons)
4. Should explain how risks are:
a. Measured (where relevant)
b. Managed
c. Mitigated
5. Develop a risk map to cover all risks
6. Can be based on different approaches
a. Regulatory capital
b. Economic capital models
c. Stress tests/scenario analysis
d. Single-point estimates
PwC
10
Capital forecasts
1. As the ICAAP must be forward-looking, it needs to incorporate
planned capital levels.
2. A fully-integrated capital forecast would be linked to the planning
and budgeting process, providing forecasts for:
a. Available physical (book) capital – essentially a function of profits,
dividends and other capital management activities
b. An adjustment of the available physical capital to reconcile to available
economic capital and regulatory capital
c. Required economic capital – essentially a function of forecast credit
exposures, market risk limits etc.
d. Required regulatory capital – essentially a function of forecast riskweighted assets.
3. Forecast requirements should be compared with forecast
availability.
PwC
11
Capital stress tests
1.
Pillar 1 stress tests
a. “tail” test
b. Sensitivity analysis
2. Pillar 2 stress tests
a. Capital stress test
b. Additional scenarios for pillar 2 risks
3. Level of severity? – look to regulatory guidance
4. Purpose: to demonstrate that the bank can survive a reasonably
severe crisis without breaching minimum capital levels
PwC
12
Capital stress tests illustrated (1)
Capital ratios
Base case forecast
“Net” stress test
“Gross” stress test
Minimum
Bank will need to show
how it intends to ensure
that this gap is eliminated,
usually by adding this
amount to the initial ICA
as a buffer or by raising
additional capital in the
plan
Time horizon of forecast and stress test
PwC
13
Capital stress tests illustrated (2)
Capital ratios
Base case forecast
“Net” stress test
“Gross” stress test
Minimum
Additional capital raised
Time horizon of forecast and stress test
PwC
14
Agenda
ICAAP components
Challenges in implementing the ICAAP
Roles of IA and risk management
Ongoing maintenance
PwC
15
Challenges in implementation
1. Making it relevant for the business (and meeting the use test)
2. Defining risk appetite is not easy!
3. Assessment of material risks
a. Comprehensiveness
b. Appropriateness of approach
4. Capital forecasting
a. How robust is the planning/budgeting process?
b. Time horizon?
5. Capital stress testing
a. Is the stress scenario appropriate?
b. Are mitigating actions credible?
PwC
16
ICAAP: Business benefits
•
•
•
•
•
•
PwC
Enhances ability to understand how much capital flexibility exists to
support risk appetite and acquisition strategy
Enables understanding of capital requirements under different economic
scenarios and “stress” scenarios
Builds and supports linkage between risk and capital – and ties
performance to both;
Positions Bank to optimize the outcome of supervisor’s review of capital
requirements, freeing up the maximum amount of capital to support
strategic flexibility
Strengthens position to respond to increasing focus on capital management
by both rating agencies and analysts.
As regulators and banks gain experience with Basel II framework, objective
would be to have the “regulatory” capital requirement move closer to the
Bank’s view of required capital (including support for target rating) –
blurring of Pillar 1 & Pillar 2 components
17
Agenda
ICAAP components
Challenges in implementing the ICAAP
Roles of IA and risk management
Ongoing maintenance
PwC
18
Typical roles and responsibilities
Function
Role
Risk owners
•Risk maps
Risk management
•Assessment of individual risks
•Risk appetite
•Input into capital stress testing
Finance
•Initial ICA
•Capital planning
•Capital stress testing
Internal Audit
•Review and challenge
Senior management
•Review, challenge and approve
Board
•Review, challenge and approve
PwC
19
Challenges: Risk appetite and risk-bearing
capacity
1.
2.
3.
4.
PwC
Level of senior management/board involvement?
Is it consistent with past experience?
Is it consistent with strategic and business plans?
Proper level of review and challenge at Board level?
20
Challenges: Assessment of material risks
1.
2.
3.
4.
5.
6.
7.
Was there full involvement of risk owners and risk management?
Risk maps fully documented?
Is it complete based on past experience?
Has all relevant date been incorporated into the assessment?
Is the modelling approach appropriate for the type of risk?
Has ‘material’ been clearly and properly defined?
Proper level of review and challenge at senior management and
Board level?
8. Arithmetic accuracy of Internal Capital Assessment?
PwC
21
Challenges: Capital planning
1. Robustness of underlying budgeting/planning process?
2. Appropriate time horizon (3-5 years)?
3. Sufficient granularity of detail?
a. Components of available capital?
b. Proper treatment of dividends etc?
c. Different assets classes?
d. Different RWA classes?
4. Consistent with past experience?
5. Arithmetic accuracy?
6. Proper challenge, review and sign-off?
PwC
22
Challenges: Capital stress testing
1. Is the severity of the stress scenario(s) appropriate?
2. Are the results consistent with the scenario(s) adopted?
3. Has there been proper involvement of all relevant departments?
a.
b.
c.
d.
e.
Strategy
Economics
Business heads
Risk
Finance
4. Is it consistent with regulatory expectations?
5. Are management mitigating actions credible?
6. Arithmetic accuracy?
PwC
23
Challenges: Use test
1. How effectively is the ICAAP embedded into day-to-day
management processes?
a.
b.
c.
d.
e.
f.
g.
PwC
Capital allocation
Capital budgeting and rationing
Performance measurement
Pricing
Compensation
Investor communications
Risk management (limits etc)
24
Challenges: Overall ICAAP governance
1. Was there a single ‘owner’ of the ICAAP to drive a consistent,
comprehensive approach?
2. Was there the right level of involvement of other stakeholders?
a. BUs, Risk, Finance, Strategy, Economics, etc?
3. Has senior management/the Board been actively involved in review
and challenge?
4. Was there a formal sign-off process?
5. Any involvement of external parties to develop/review the ICAAP?
a. Skills and qualifications?
b. Any issues raised by them not addressed?
PwC
25
Agenda
ICAAP components
Challenges in implementing the ICAAP
Roles of IA and risk management
Ongoing maintenance
PwC
26
Ongoing maintenance
1. ICAAP should be refreshed at least annually
2. More frequently if:
a. Significant M&A or disposals
b. Significant changes in corporate structure
c. Material changes in regulatory requirements (e.g. Basel III)
d. Crisis occurs
3. If no major changes, it is a ‘refresh’, not a ‘re-do’
4. IA needs to review the process to ensure that:
a. All elements have been reviewed to ensure relevancy
b. Capital planning and stress testing updated
c. Proper review, challenge and approval
PwC
27
Thank you
This publication has been prepared for general guidance on matters of interest only, and does
not constitute professional advice. You should not act upon the information contained in this
publication without obtaining specific professional advice. No representation or warranty
(express or implied) is given as to the accuracy or completeness of the information contained
in this publication, and, to the extent permitted by law, [insert legal name of the PwC firm], its
members, employees and agents do not accept or assume any liability, responsibility or duty of
care for any consequences of you or anyone else acting, or refraining to act, in reliance on the
information contained in this publication or for any decision based on it.
© 2011 PricewaterhouseCoopers Limited. All rights reserved. In this document, “PwC” refers to
PricewaterhouseCoopers Limited which is a member firm of PricewaterhouseCoopers
International Limited, each member firm of which is a separate legal entity.